Privilege Separation talk

This slides are about Privilege Separation. The basic idea behind is to split up a forked process into one privileged master process and one or more unprivileged child processes. All communication with untrusted sources is handled by the unprivileged and mostly chroot(2)ed process.

Figure 1: Openwall popa3d process management

I presented this talk at a private CCC meeting in 2004.

Slides

Links